Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/23a6f31cf267ece6386e3453ef799461b28fd354.roa
File:                     23a6f31cf267ece6386e3453ef799461b28fd354.roa (raw, json)
Hash identifier:          oioKoOat6Zp9wCjziJBmYAqZyGewOBtt7iPr8HzkQNY=
Subject key identifier:   60:0F:60:0C:9D:9E:57:36:F2:8A:66:F8:3E:F9:CD:6A:02:AE:E4:F2
Certificate issuer:       /CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
Certificate serial:       0C62CF
Authority key identifier: CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/23a6f31cf267ece6386e3453ef799461b28fd354.roa
Signing time:             Wed 24 Mar 2021 14:42:08 +0000
ROA not before:           Wed 24 Mar 2021 14:42:07 +0000
ROA not after:            Tue 24 Mar 2026 14:42:07 +0000
asID:                     267828
IP address blocks:        45.173.216.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811727 (0xc62cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a2147e821b0c697078021ef06a9b4b9bf02ef3
        Validity
            Not Before: Mar 24 14:42:07 2021 GMT
            Not After : Mar 24 14:42:07 2026 GMT
        Subject: CN=23a6f31cf267ece6386e3453ef799461b28fd354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:83:24:3c:1e:ae:e9:2b:d9:ec:5a:37:12:44:
                    af:f4:8c:12:30:d2:f2:95:a7:04:01:f0:1c:bd:9b:
                    aa:e8:0d:f1:b0:b7:84:9b:13:4c:18:fa:f8:3a:53:
                    3d:bf:92:52:48:1b:43:8a:c6:e1:18:91:5f:49:d9:
                    76:d8:15:19:7b:1a:2d:3f:62:74:93:9e:7c:e4:c6:
                    71:88:53:8c:f6:37:a5:25:5b:29:bb:21:ad:2d:b7:
                    22:ac:e2:94:4b:97:82:77:12:18:a6:dd:a0:c5:41:
                    07:11:52:29:87:31:b1:77:13:29:98:1e:38:5e:e6:
                    fd:59:ee:d4:3e:41:dc:2c:5a:bf:f5:f4:3b:f3:6c:
                    a3:dd:56:c0:3f:f8:3c:f9:0a:a5:e5:0f:4a:ab:56:
                    3a:4b:15:cd:00:40:53:b5:4f:d7:f0:a2:b0:f7:d6:
                    73:cc:1f:74:7a:0b:7f:5b:c7:8b:66:04:ba:c4:03:
                    64:4d:39:0d:74:de:e7:bc:1c:46:ce:30:76:07:90:
                    bc:65:7b:de:2a:35:37:7b:1d:99:55:08:ea:eb:64:
                    24:46:5d:19:bf:18:a5:5f:fd:c4:71:11:29:cb:f5:
                    11:49:11:f5:3a:f5:81:6b:67:b5:dc:99:cd:15:1d:
                    16:09:3e:4c:f3:13:cc:44:c2:3b:c7:4c:72:96:63:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0F:60:0C:9D:9E:57:36:F2:8A:66:F8:3E:F9:CD:6A:02:AE:E4:F2
            X509v3 Authority Key Identifier:
                keyid:CF:58:10:B7:13:2B:C8:29:72:26:7F:9F:7D:FB:82:A5:7F:CF:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a2147e821b0c697078021ef06a9b4b9bf02ef3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/23a6f31cf267ece6386e3453ef799461b28fd354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e956e74-55e3-4a85-be30-43d7761fb5d2/62a2147e821b0c697078021ef06a9b4b9bf02ef3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:bf:10:40:0b:2a:70:57:4c:39:cf:25:df:8c:98:bd:2b:7a:
         aa:6a:17:d1:9c:ba:0c:f1:c8:cf:2b:5d:6e:f0:b2:e7:c8:29:
         ed:36:42:aa:1c:a2:15:ff:05:31:76:ed:11:cb:5a:b8:9f:99:
         b0:f9:a0:bb:e1:93:a5:da:63:77:2c:62:76:de:e2:98:a5:34:
         81:94:6f:8b:10:52:24:86:6c:2e:36:52:46:e2:8d:f7:44:1d:
         ab:83:04:0c:ce:00:8f:68:db:64:0f:65:38:f3:44:77:49:54:
         39:ba:82:6b:13:23:b6:e0:cc:d6:5c:9b:68:5d:39:d0:7e:8a:
         ad:35:f9:48:f1:dd:7b:f9:69:a6:f0:5b:13:83:bf:da:90:c3:
         85:e8:da:e3:d2:4e:60:eb:1e:7a:2e:76:bb:ce:ef:43:0a:63:
         6e:ca:eb:4e:d6:80:70:1c:db:28:fc:5d:0c:99:3f:40:26:7b:
         07:6d:59:9e:b5:68:a6:83:48:c0:81:04:e9:0f:f5:44:f9:dc:
         5e:24:e6:47:34:7c:6c:7b:9a:72:48:20:a1:34:e0:7f:0f:94:
         1c:36:fb:ec:8e:5c:8f:2d:8c:c9:1d:1f:1c:ad:65:69:0b:0f:
         26:ec:47:fc:65:b4:12:8a:46:cc:5e:6e:53:42:9c:9c:52:1c:
         22:c5:c7:e4
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDGLPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDYy
YTIxNDdlODIxYjBjNjk3MDc4MDIxZWYwNmE5YjRiOWJmMDJlZjMwHhcNMjEwMzI0
MTQ0MjA3WhcNMjYwMzI0MTQ0MjA3WjAzMTEwLwYDVQQDEygyM2E2ZjMxY2YyNjdl
Y2U2Mzg2ZTM0NTNlZjc5OTQ2MWIyOGZkMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAj4MkPB6u6SvZ7Fo3EkSv9IwSMNLylacEAfAcvZuq6A3xsLeE
mxNMGPr4OlM9v5JSSBtDisbhGJFfSdl22BUZexotP2J0k5585MZxiFOM9jelJVsp
uyGtLbcirOKUS5eCdxIYpt2gxUEHEVIphzGxdxMpmB44Xub9We7UPkHcLFq/9fQ7
82yj3VbAP/g8+Qql5Q9Kq1Y6SxXNAEBTtU/X8KKw99ZzzB90egt/W8eLZgS6xANk
TTkNdN7nvBxGzjB2B5C8ZXveKjU3ex2ZVQjq62QkRl0ZvxilX/3EcREpy/URSRH1
OvWBa2e13JnNFR0WCT5M8xPMRMI7x0xylmNkYQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFGAPYAydnlc28opm+D75zWoCruTyMB8GA1UdIwQYMBaAFM9YELcTK8gpciZ/
n337gqV/z+N2MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjJhMjE0
N2U4MjFiMGM2OTcwNzgwMjFlZjA2YTliNGI5YmYwMmVmMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNmU5NTZlNzQtNTVlMy00YTg1LWJlMzAtNDNkNzc2
MWZiNWQyLzIzYTZmMzFjZjI2N2VjZTYzODZlMzQ1M2VmNzk5NDYxYjI4ZmQzNTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82ZTk1NmU3NC01NWUzLTRhODUtYmUzMC00M2Q3
NzYxZmI1ZDIvNjJhMjE0N2U4MjFiMGM2OTcwNzgwMjFlZjA2YTliNGI5YmYwMmVm
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAS2t2DANBgkqhkiG9w0BAQsFAAOCAQEApb8QQAsqcFdMOc8l
34yYvSt6qmoX0Zy6DPHIzytdbvCy58gp7TZCqhyiFf8FMXbtEctauJ+ZsPmgu+GT
pdpjdyxidt7imKU0gZRvixBSJIZsLjZSRuKN90Qdq4MEDM4Aj2jbZA9lOPNEd0lU
ObqCaxMjtuDM1lybaF050H6KrTX5SPHde/lppvBbE4O/2pDDheja49JOYOseei52
u87vQwpjbsrrTtaAcBzbKPxdDJk/QCZ7B21ZnrVopoNIwIEE6Q/1RPncXiTmRzR8
bHuackggoTTgfw+UHDb77I5cjy2MyR0fHK1laQsPJuxH/GW0EopGzF5uU0KcnFIc
IsXH5A==
-----END CERTIFICATE-----